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(54) ATTRIBUTE CERTIFICATION PROGRAM AND DEVICE 

(57)Abstract: 

PROBLEM TO BE SOLVED: To realize certification and signature 
techniques which can be applied to various systems and contribute 
to development of an information-oriented society. 
SOLUTION: The attribute certificate is provided which includes a 
lot of attribute information so that they can be individually verified. 
Concretely, (1) an attribute certificate CertA is a digital signature 
of an attribute certificate issue agency ACA which is given to a 
public key PA of a prover A, attribute information d to c8 
ciphered by a key, and the total number 8 of attributes. (2) The 
prover A discloses attribute information a1, a3, and a6, which are 
related to only attributes of which the disclosure is requested, to a 
verifier and proves it to the verifier that disclosed attribute 
information a1, a3, and a6 are permitted right information. (3) 
Attribute information a2, a4, a5, a7, and a8 related to 
which the disclosure is not requested are not disclosed 
verifier at all. Thus various certificates/signatures using 
required attributes are possible. 
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(57) immi 

fclHttBR»*KWS. AttWfctt ( 1 ) JHttBnJtfC 

RMBStrfWACAO^^jr/WMi-r*. (2) IE 
W# A B . S»fi* § tifc«tt«WC Ml" S PttlWR a 
a , a 3 , a , WmM\t WrK% , * fc , 09** S ftfcUtt 
flWa, ,a, ,a.JMB^StifciEaac11HRr**li** 
!E#(CiEIST-#S„ (3) BR%S*S*lTl»<Hr>WttK 
Pf SJHtttWR a I ,a,,a,,a T ,a. B*«#fcHB« 
Si b ft «r » . cfc -3 Ti&K&NRDJRtt* ffl t » fc««ffiE W/ 




BBI#rt O n <I©)Stttfr#R© 5 i5 . n <IOT©JS«R 
milBf OT#«g© => > f * - j» ft , 

iMaR^HaftafiW asi£(»i8 . 

A*3nfcrtS{cS-3L>rfllEnffl<0JRttWffift4Jffi 
StifcfiH«ftlWBJRttHra»ieffl»HSIBK:«SW* 

mtsmmsmumzst* tbxm&sn. 

Xt\W- b ttM&mftVK ME n fflHTOJH ttflf#©fc 
Efflf - * iftlHWKXttJW* fcfflE*ttHWaBcj8fl| 

[»*^2 ] mm i fcia*!4©«ttEEBj7-a ?7ak 

iilBJIttlF^£J3;fM3«. ftfB? + u >y©^ » f»* 
fcWffiU C©^7 J/afflKS-^^rlWBJRttEWftW 

3 ] IfcttI 1 XBB*a2 {CBBfJOJUttffiW 

riwaBi«»«:x«3i*Kj fctt*.t rn»Kj tui 
-3MiB?+u>^ft^-r5^aft^tfCift#i:i-r 

Sft fdffl-T 5=Wffl#SJE. iffflBf 'JflMBK fjIBJRttlS 

B»fti6fT-r s Httswmisff «iasa. s^mot 
^a*6SWfcir8B)RttBsi»ft«WEom-3«iriB)Rtt 

BBJ»rt © n §I©Wit'fifE© 5 . n fflOT©JSffl«$ R 
fttllEt S ttfBtSgS ftfflj it fclftlffl ^ X f A fcffijf 
£tl£)IttIEBj7'n ^5 AtA-5t, 
DWa JWtfiSWfitf «W8K© =i > f » - £ ft . 

PJlBWttttf RS SE^SK <fc SSSSiMbWEiSi"*?* £ gft 
«ti«. ti)IBni!©ltt1ffgfttJ&^-c)ltteW« 

«Mtu aioittBiW*^«tt«fcaMrr suit 

Ci»*B5 ] n«I©JIttfiWR©S&iMtxfcJIttlW.W 



*ftf OTf «H Ifggftfc IWB3F iJffl#«gOcWIB«ttiI 

6 5t fcUMBHttBHW ftttE b M^ffir IBIStt 
B5I»rt © n fflOlttflB R© 5 5 . n iIOT©)Itttif * R 

mrlBfJffl^g^e^WfcfufBJlttfSpl^C^Effif 1 " 
jrfcS^HT. «HB«ttBU»©ES14ft«iH-r SRI* 

10 Bm«*fE^a. 

SfffBJSttlS pJ»^1E#IS(C «fc 5 «ttEte»*JEattft^f 
£ * , UIBfJffl^B* 6 S W fcMttlEBJSO'fu IB n fl 

pxromummcm b . & * jESttsttHf anttipj 
asm 

i UTttffiStfSfc»©JSffiflE9l§;70 

[M$fl6] n#a5KiaR©iifflra!^o^9AK 

MBtttttiHBDa > f A - £ ft , 
MBJimSnJtf^iiE^S^cfca^iBS^E^ttftmT 
20 £#, nfflOT©JW4ftJIS-r5)ittttfga^m> 

Bpjfflaswcii&fli ra? ♦ uyvmmm* 
t bxmmznzft.toomm.vi7v a 0 
[ 7 ] n^a 5 xizmxm e m mvmmw 

« . fflSSMwS nfc n «HT©MfaH««©rt«K«^a» 

30 

C»*S 8 ] n fliCDMtttW IR©a*jAS tifcHttlSW 

#ft ipwr sf mmmgmmicmm&m 

#gfi*> 6 fcfu !BJlttlgW«ft^iE b MoStlBIStt 
i¥SJ#rt© n ffiSOMttffif * R© 5 ft . n ffl^T©JSttt»f R 
ftttiEf S«ffiE«SiB4«AfcimtliEWS'^^A«:ffiffl 

UBBIPI14K5W©«ff©IS«:, tmflt&i?ftHtt&£j3 
40 fS^^Si, 

A^5nfcrtS(c»^^r«riBnffl©sttfffgft« 

b> 3«nffii©Wtt««SCfaWBSi*fiS^a{cJ:t)^fiS 
fulB^US^Bic j; S^iEC^ic, fggaMttlSW«©^ 

wmf-zt, **i>y*jK.m~3\,>Ttmbimmm 



at. 

[ ft *a 9 ] Mm 8 (ClBttCDfiJffi#««(C*J l »r , 
WtBSttS^^ISB, WIB^ + U>5?©<" » Wtt 

*sffiL, c©^?s/»«K»^a»-ciiEiHHEi»** 

Ui-r a c £ £ t znm&m. 

[ it *s i o ] mm 8 xmm q ^mmomm 

rMiBfimcXttgiMtj KfUt risiijfocj £U s. 

I mm .11) n ffl©lffi1f f RCii&iA * ftfcJIffiB 
ffiSW»*3© n ffl©«14W ft© n fflKTOIIttW 

5W£*. «rEnfflOlSttt»a*a«)iM,rHttHW» 
^ff^fcC £%'#1t£TSJ114ISWSMflifWgM D 

[ mm i2] n ffl©jstt«a©a&ji * nfcjittis 
Fammw.fr wfcOTamfflPRi»*«ttE o j.-ofiiBj« 

ttlS bJ«N © n H©JStttifB© 5 ft . n H«T©Httt» 
mflBfiJffl^g*^^WfcMfB)lttBpJ#©^iEffir- 

* ks-^-c. fiiBjitrigpj«©E^tt*^E-r swit 

£ # . ftrfBfiW#^g^6SWfc)lttEigSD-tufBn H 

WT©«tttff g«c w u . «■ * jEmtmmt zwmmi 
mm 1 3 ] ii^ii 1 2 KiBttowEfsatcfet) 

r, 

fu I BM£ l§W»t£II#Mt «fc £ ^llBiMI^IEStt s^-r 
it,n «BTF ©JItt**S J&f « MttflWffidt^R £ , 

luiEitt'it f r^^#sk «fc o § n h £ . + 

IBf OT#«§KiifiT s * + u > y^fiS^a £ > 
mm 1 4 ] 1**11 1 2 XBft*! 1 3 iCfBS©^ 



majittiEW«wa«:± 5ttiE*sa*iE^tt*5vr £ 

§ , milBH^S ftfc n fflJMT©Jitt1»fE©rtSK»-3^ 
r. BfS©^a^xf-A©^ff^lWrs^»»fltW 

^®4ii^./cc £*#a£-rs^a#«g„ 

[ftgoiHI&MH] 

[0 00 1] 

[^©H <T SRJSf^R] #BWtt. ««S/*f AfclS 

10 [0 00 2] 

[$#©£'#] jB^OttHWHtircB. SS*»t 
©^-^fflfiOltK, f^©^^^^^-^ 
£ frm&kV* > -fe - yBH* . fifitfff© jB3tt*S 

[0 0 0 3 ] j&S^BE • WAtflEW* (ft 

) m Bommni « k <t o s55K»s «t a 5 -n 
si«toTM. sfc. ^u^tt> ubm mm) © 

20 

[0 004] 

[*W^»*b«t 5 £f SHSffi] «±©J: 9 &BfE • * 
*S*tt. t«E{ttt^*SxSBtW*©*-C^^gtt 

©wi» ©-e$> o , it «f mgmm § # ^ . 

[0 00 5] *»Wtt±ESIt»*#*l/T!tcSn)t*»© 
T> SttVX'f AJctSffltr*. t»«fbtt^©«H{caF4 

Lr* sji mm f^^vm^mtzz t * @ . 

W£T5„ 
30 [0 0 0 6 ] 

[IMKIfl«"Sfc»©?lR] *«8©#W. tK»© 
Pttt»|g*filSiJ«:^SE'BJtlJc$&fcS»'BJ» i &KW5 

[0 00 7] «S*»WBOT© ( 1 ) ~ ( 3 ) ic^T 

[0 00 8 ] ( 1 ) RttBUSC ert^ B, 0 6 oWTiE 

Cl ~c Sl &0'IStt©«n(=8x KMLrftStlfc 
40 RttB>nWfT«n A C A Of < V Z ;!/»« -C* 5 . 
[000 9] ( 2 ) fPJ3#A«. PB^5*Stiyt)R14© 
^(c M f 5 Uttttfg a , , a , , a . StdSESK PB^"C * , 
H^StifclHttflWIla! ,a, ,a.*JKm3hfciE 

[ooio] o) wsss^shtr^aisflsttKH-rs 

UtttflS a ! ,a,,a s ,a 7 ,a B B^1E^K-»M bt£ 

[0011] 117 (a) {C^ffi£*©» 

50 aSHctiSSKifc^. H7 (b) K5W«fc9fc«Pltt 



l~3£^tfg£?ftS*lrcMft9. §6(c. B6{ci^ 

So 

[0 0 1 2 ] §t, «±©J;5^*^bj©#^{co^-c 
*f*WicttJi(T©J:5^a* 5 itDf)ns 0 ft*. #11 
H^tt, IB»©ffflM4©&#>6> ^o^5Ail/TSBB 

s*ifc»£©#45Vi"#'. &b. m ^^7-A^©ft 
©#?-:jy-r^LTfcJ:i»c items £rfefti>. 

n[I©)Ifffl«R©S&jA£ftfcJS 

ttti. mt a mmmm. mmm^m.mu 
mmm%mm.fr &s » fcit lajmss vimttm. bR-om 

iaHttlSW»© n fll©JItt1t «© 5 % . n fI«T©H 
ttfWR^^BET SftlE^B4« AfcJWfefflESBi' * ^ A 

[ 0 0 1 3 ] » 1 ©IMHtt. l&&5PJfll«SSH©3>fcf a 
-**. KflBBIittBBltfOlBffOIStc. f&ffiaKtf&H 

BBJWME^a. tl/CWIStt. mEtMBmncJ: 
&£IE©I!tC, BglBlttlSW^C^Effl^-f i, ^ + 
lyy^cm^r^-m OfclittaMcwefliiBn flWT 
©IMtlflWflOfclEffiS*- * i £|eTCX«J3IJ* CcfifiB^ 

•Sfcst>©)lttliE3^7'a ^7A"Ci§„ 
[ 0 0 1 4 ] C C-C. iifSJSWJ£/S#K«. -fe*^ 

y tti6j±©ii*#>&. pis?- + b>^©^ ^ 
**mu ton? is*mm^xm%mms.w*n 

BbXh^K 

[ 0 0 1 5 ] Sfc, «riBJEiffiJ8£j$*Ktt. *'Jffl« 
«cjaffl-rs»^©a^6. rfyiapfmc 

>W5ffl^i!)t <fc i». 

[ooi6] » 2 ©»««:. fria)ittiSRj«^«iig« 
B©3>e»-**, mil 3f OT^tiSE** 6 fi^ § 

g*m-r £ *. MIB n ffl©«ttflWR**»ii^JKttB 
JKffiBSm^ff*®. £LTfitg3l*Sto6©JIttlira 
[0017] WSCDJHBB. IWafcH^StBOaVK* 

mm?- * ki^»t, mmmmm<DiE%mm£ 

1 5 MWmMEm «BMttBi>IWftB*SK <fc 



(4) iff M 2002-2 15027 

6 

wfc«ittBwac«wa n muTom&mm b . & * 

JE^tt««iE-rS)RttliB»«ai*a. iLTmtBSi+S 
fc«>©MfflGH8:/B ^AfftS. 
!0018]CCt, 13 ©#PJ3», 1ME*PS*W 

rnvmrntcj: mmmm^m^-r 1 1 . n 

ffl«T©JS1t*fgS-r5li14flBlffi<S^a. lulB/ittlt 

ISO. SK?* U>ySDffiiWBJeErtS4tWBWffl«« 

©©ISttfPjT'n ^-7 A"C ft o T fecfc^o 
[0 0 19] ft&\ #3 ©38911*. IglBHttli 

ata^* t- A©ntf ^fpnj-r zttmmmfnimz, t b 

r«S #5/c&©)lttSE?g7'a ^7 a t bt «fci». 
[0 0 2 0 ] (ffiJB) *jBBJ»eU:©J: 9ft* 

K^WDfcCifCiO, n<i©Jlttt»$M&jiSnfc 
H14!SDl«^f ilffl 1/ . M^S* 3tl5n ffl«T©Mffif 
20 «©*&1ftliE«{ciB^U. H^StfSh&^Rtttlia* 

[0 0 2 1 ] C©«fc5(C. #SEW/»*©I«{£:. Utt 

©r, sa^xfACcj^ffl-et, W«fta£©»MK:* 

[0 0 2 2 ] 

[»w©hji©^] ot. *&wo&mmmicm 
rmwz0mbxmn?6, ft*, sas^irfifis 

n5Sffl^7^-^ifBWWT©il0rft5„ 
30 p , q : +#cc A# ft*S5:-c P = 2 q + l ©M<&3S;£$S 

fc*. 

g : mmm z P *r ©tfc»*s a i ft S J; 5 ft£j&!§ 0 ( g 

tt, ^Xf-AJtM©fii (#4ft|!ft<fln~»6*fl0& 

tt) iLr<f>J;<, jpJffl#«BA*safiWSil (*4~ 

P A : M^MIAOAHM. 

S» : HJ8«ttKA©fg$*. 

A 0 : Jlt41SW»l6WCCffi^§nfcllttil {a, ,a, , 

-,a.J . 

40 a, : A„© i #S(l^ign)©Jittf»$g (attribute) 
n : Pttt»fg©« 
r, : i#@Cl*l£n)©&«. 
b, : a,©7"7-f > Kffi (blinded attribute) 
c f : b,©n5 y hfil (committed blinded attribut 
e) 

h «3S-#fltt^^im 

SicucA ED] : f 1 "* D(CM-rSPt4ISBj«Mf«M 

©*S„ 

Verijc* [ D ] : * D {CtfT « MttS W«f6tf «H 
50 ©S«*liE 0 



u : mmfsffitcmmm <ra#> s«A#&sf $a 

m (G«Zq*) 

v : mrnmrnm (hh#) smA#mt&u 

(D3$5H(v=g" (mod p) ) 

a : mimmmmmm^ob^tcmm, 
(ez q *) *si»b*ijb# 

£KA#£fiW3 (CO^tU>y©) ^? 5/ a. fit 

f (m): m^^fcAOJIttfEW 

x 1 1 y : tr » hfljx i tfs h?ijy £©*S£„ 

[0023] (mi h i BWJ3©m i © 

U»ffilf«IB««A C AKtftMEtttBV fcttATfe 
0v SIHBA. ACA, VB, JE-ti-en^-K'JxT, 

rt»*. ft*, v? h**TR:J:0««3*.<MHf. § 

usa, aca, v&m&mt&itiMD-fvy** 

#«*SHA. ACA. V03>tV-$KfJ!)'f>X|- 

[0 02 4] ffiWAB; ««g|5 1 1 . JSffitfE 
SfiRWl 2. MW»WEni 3, M&flHflMl 

[0 02 5 ] m%J8,® 1 1 «. MttB«]*C er& ©«ff 

ertu©»ffB*{c, eft6$^S»Rtf&W«P<, 

tP6&ssi5 1 2 {c^wrsaffi* & 
[0026] mm n&m 1 2 b. st&sw 11*6 
fciws a s , ww^iEgB 1 3 icwozt m 

$E {a^a^-.a.} *£JdSUTJStttiWR*«a51 4K 
««ff««ACAKJKW'*«tti**>-3ri»*. ft 

*j. RttfiHRtt. ffl63W)as»tiiwrc*ti«J:<. -e© 
rtsttflarc**. 

[0 0 2 7 ] HttlgW«HE§|5 1 3 B, )S'«I»?Mt 
«H A C A 6 »t fc)114lg5J»C ertu&O'n ffl©SL« 
(r„ -, r,)Ki*T, MttHHIVifll 1 4 £# 

Mb&*5 6@f«©^iE^a (aatssTo) smts 
©sL^(r 1 , -, rj *m&mmmui 4«c«??-r 

[ 0 0 2 8 ] ftfc, MfflBPMfCerUB. MWBSOm 
tf«M««ACA«:«fcSf r yj»^*SSi9 lC(l [h (P» 
lln||o,||-||o.) ] "C*S. 

[0 0 2 9 ] JSttltfg^aSP 1 4 B. *iJffl*SI§Aft© 

*fW»Ktt.. fiWiP*. ttftttS*. #M14ax~a ni 



Cert**»«BPrilittorn6. ft*. WMtS A ». 

[0 03 0] «ttlPJ3«g|S 1 5 B, HttEKOBKC, 
S*uRtf*©=«5 * Hiv*£ii£r5«j6& l Utttif 
fgHSSBl 4£#MLT&!Effi^~£ (v.Cerfc.n, 

mmwvfrp>?* u>ymacfj»tt»A43f» st, 

S*$tifcJ»tt©Bfl^=&«IS^5^, RttfEIK f (m) 

So 

[0 0 3 1 ] Sfc, OT^gAOHTOJiL.-cB, 
ffiS©3gffi*tafflWffi-C*5. 0MLB". /"C-V^/Ua> 

©sat. nmsao i c#- Ki©«^tt9) ©t>f n 

20 [0 0 3 2 ] HISS nJ««M«g A C A B, Jlttlf 
fBSffiSP2 lSO*HttISnJ«^fg|!2 2***Xl,»*. 
[0 0 3 3 ] Jfftttitffi*£flS2 1 B. *OT#t«A*»& 

a* § n^cntts a , rt©§nt4 a , immom s t l 

Ti^*?S*«S:«E-J-5a<l6i. «Sft*MttKi<J» 
. [0 034] KSttB^IWStfW 2 2B, JStt1tfH*SSI3 

30 pJ^Cert,, n<i©SL^(r a . -, r.)«KKI«KB 
A K S flltt i « h i X I ^5 . 
[0 0 3 5 ] WeM»V». JlttfSW«^agI53 1 . 
IStttiWBS^SIJ 3 2, ft^ y SfiRBP 3 3 SO'lRttE 
i|}(ttBIP3 4t<l«.r^*. 

[0036] mmmmmms 1 b, «iffl«««A*> 

^W/c^iiEfflT 1 "^ (v.Cert^.n .P.,0,,-. 
c„) K»-3l»T. lWpJ#Cert^©ES14^^iE-r 

40 [0 03 7] Httf»$Rfi*953 2 B, ltt!I.W#^Hg|5 
3 1*6«Wfc«ttBIUlW«iEaftaW4t. PK^TSc 

[0038]?t U >S?4fiS» 3 3 B. Mtt«fRS*gP 

flttBi. CO? f U>ym2Sya t MttlSA*IR14EW«ME 
§153 4RO'fiJfl!#SgAK5iffrS»£ ; &fe-3-r^ 

[0 03 9] )114HBJ^gp3 4 B, f'W§8SA#>6 
so JtWfcJittBWf Cm)©jE^tt**aE"r*«tti» c© 



(6) 



12002-215027 



«I9S*jWES ftSf t ft . IS 5 ft fcMtt a , ©iES 

[0040] JWC. fcU©«fc 5 JC<ftiS3ftfcKfflffiJJ5' 
X y A©ftfP*H 2 SO*H 3©7P--? + -h ftJBl* 

t, M«B#©JSfflin5j*^fi\ S&>'fflm^n#©Jl 

ttfPJ3©jlll&t«-r£„ 

[0041] (mwxmfflr) m z vcm «t 5 k. « 
a <, »r b . umis 1 1 s „ e , z 

q^EKSTD^liP.^g^dnod p) 

fttw-r a i ( s t 2 ) , c ft 6inm s „ stf&KH 10 

[0042] Htt«g«§|5 1 2 B, $i^ilS A ft)ltt 

« ( s t 3 ) mmmmm^ 1 4 kkj&t 5- 

ttBA.*llttB5»»rMACAK:aS1-*. Utt 
BpH^tf»l»ACA«:tei,»TB. H14fiMR*SSI52 1 
US 3 ftfc&Utt a , €rfijffl#©t»ai OTjES* 1 
5*»ft*SEU (ST 4) , 3&*£$ftjR&B?J*?&?T£|! 
2 2(C3#ffiTI»o 20 
[0043] «14BnI«IBtffflJ2 2 B. &ffi&ifiJE% 

-c* § i fts-f i * , etrojsiisssi W6tT«Bi ( s t 

5~ST8) tJBfT*. 

[0044]»K, nffl©aKr,e,Zq**&itrS 
( S T 5 ) . 

[0 04 5] tt^r. SLS*r i £JItta ( iftM£ (3 
tt) or«»S/aBMfcKJ:0. n«©:/9<f>F*b, 
= h (a, ||r,) ftftHC-rS (STB) . 

[0 04 6 ] ^tc, ^eaSg{c*fb. &7v<(>mb 
i*Ml>TnI©35»Hc 1 = g b ' (mod p) 4 30 

wrrs (st 7) . 

[0 0 4 7 3 fiHttP,. Itta ( ©f#inM 

§35.^ Mficl-cnft^U ^ne.KAr>aMl! 

t 7 j/ » iicc^j- o , 1 a©$* §rc»g * 

iffCiKJ^. 114ESr*Certi*l6fT-J-S (ST 
8) . 

[0048] 

Cert^=SicucA [h (Pa I |n 1 1 c, 1 1- 1 1 C ) ] 
£©<£ 5 &M14BEJ»$8fT*HI©»7& RttSPMBS 
fflMHACAB. WtBBItfCert,. nffl©SLSfc 40 

(tl -. r.) *Wffl#«BA«C3@Sfi1'4. 

[0049] STOWf ISItA"CB, MttBWHMftlE 
gR 1 3 j^TOtfcEftHIfcfTS ( S T 9 ) . 

[0 05 0] MaMC, JRtttWSff-a^ 1 4*»6n<H©« 
tta,~a.t»«i. Cft6#Mtta,£&SLiS!r t <!:ft 

= h (a, I In) ttWW-a. 
[0 05 1 ] £j&Bsr«:*tU 4t^5-f>Ftfb 
,ftJEt»"t\ Oi = g kl (mod p) ^ttSTSo 
[0 05 2] Jt&(C. £iMtP A , ISa,©«nay 50 



§3 3-v Hfid-c.ftSteU **l6lC^»J/*MR 
ft:ftl/Tf#fc^ » faffli . lttlSi5J»C ert^ ftHttlS 

^•fgff m a c a ©&w«-ca# l fcSHHS* t * jt 

(W 5 C i «:<!: «3 . H4B^» C eru ft&HT 
S. 

[0 0 5 3 ] Veri JC , [h (P» | |n 1 1 c, 1 1- 1 1 
c.) , Certu] = valid (IES) ? 
C©±5a«aE«Hi©»7a. lfei8SS*JiE^*h 
B, ip]ffl#SgaAB, WttBSKCerti. SSLifcr,- 
r.ai3%as» HBc-o.SBIttflMRWlWl 4tc 

[0054] {mm.m) m 3 ksi- 5 fc , f 

1ATB, jSttfPjMgPl 5*«. SLSue B Zq*ft£ 
fiRU ^©3 5 9 Ffflv = g u (mod p)4Hff 
3 (ST 1 1 ) . 

[0 05 5] b*>Sft. WttBHB&Sffln 5B. Itttif 
WflffflSPl 4*#MbT. SUBuOaS? Mtv. Itt 

tta,-a»®3 5 9 Mile, ,- , c^BtS^mEMf'- 
$ (v,Ceit,,n 1 P»,c 11 -.c.) ftfcESeUBVK: 

[0 0 5 6 ] tMBHtKVt*. HttWWCerfcOtttE 
fflir-£ (v.Certi.n.PA.Cx.-.c) ft^WS 
i, MSBj»^iEg|53 lfC«fc0 4 JRffsiBltfCertA© 
iEStt^E-r^ (ST1 2) . 
[005 7] Veriu, [h (P A | |n 1 1 o, 1 1- 1 1 
c„) , Certu] =va1id? 

■COMttflHB a , ~ a , tlWESfttWRr** B 

^^aE-TSo IEStt©^fiE®S©»7S> JKttB?JWft 
ESP 3 1 B, *ffiE*S*£R14f**B#ffl$3 2(CiifflT 
S„ 

[0 0 5 8 ] Htt'»fgS^gP3 2 B. mmmiJE^V 

*nB. m^b-c^u^utt (mitt) *»6a*Mtt 

[0 0 5 9] 9 : -tl->^)SgP3 3B, ^tU^me 
,Zq**ftJ«L. (ST1 3) . ftV>ymi, MSI/ 
TTSt Wr>)Rtt*> 6tt 5«tt»A i ft S B©WttiEW«aE 
SP3 4RCRNS«iaiA(Cj»|-rS. 

[0060] mmmsAvu, u>ymsejqstt 

HA ftgtf -5 i . UttSEBJ^gP 1 5 j&J. PBwS*S n 

WU»6«c«MttE9i f Cm)fttWf5 ( S T 1 
4) . 

f (m)= v S, + ui+ b, m' + •••+ b„m ntl (mo 
d q) 

■rat>%. JRttfEWf (m)B. HISSES hfcJWt©*8 

i ffl©«^, :&S©J: 55c i + l 
f (m)= vS 1 + ui+b,i ! + -+b,i itl (mo 
d q) 
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ft*». HS*© "b,~b," ©IB»B> l#S~i#B 
iffl© "b," #«t»l&h*«-e*SC4HW9*"C 

b6f, n ffl£T©jp?ft ( b t ~ b . ) "CjRttilfj f (m ) 

[oo6i] o-rtucbTfe. ^©fg. m\mm^MM 

15B, IttKWf (m)i, BB^fi*©* ofcJSttgf A 
{cigStSJit»-f j . Mtta l S0SAr < »&6«R 
tifcMfflMB©*!!!^- *(j,a 1 ,r 1 )i«: 
^H#SgVtc^fi1-S ( j e A) . 
[0 06 2] fcIE£8«Vt?B, MttiraiMEg|3 3 4 

f (m)©IEStt£#©0 1 ^il^icj; 
«3^IE1-S (ST1 5) . 
[ftl] 

g f(m) - p A v v m ncr i+ ' ( mod P ) 
1=1 

[006 3] Ctlfc cfc 5 . *WigHVB. HlfgPJ* 
Cert*W©£T©H14tilf«a 1 ~a, 1 ©5fc, BB^B*3 
ftfc i ffl©Httif « a x ~ a , ®±XWVm 3 ttfclES % 

1WRr*5i:i**ttEr*ci*«r*«. *fc, MBS 

JbWESfcm-rt*. M14IE9MftliE«3 4tt. M^B* 
Ofclttj eAfCoi>r, Xf^'STl 2"C«tf/ta 

*2WE^J:9<CffljmcWE-4-S (ST 1 6) . 
[R2] 

c jS g h ^jllrj) (mo d p) 

[0 0 6 4] ChK«fc0, 8BE#SEVB, JSsttfSRW 
Cert l f'3©nffl©Wltta 1 ~a„©^-fe, iJ^SftfcJltt 
ai ©**fflJ3!l«:«WE-r S C itfTSS. 

[0 0 6 5 ] ±$U/cJ; 5 KMIHilC Jctltf . nffl 
©UttltfS a a ~ a. ©SfejAS ftfcJHttBnJttC ert, £ 
f W U HMSB#S fifc n ffl«T©)Stt«« a,OM 

■re**. 

[ o o e 6 ] c©j: ^ oc, mmm/m^(omic. m& 

#5©"C, ^a^Xf-AiOcUrct. f»fWtt±£©?£li 

[0 06 7 ] MmtVAB, -7S T 

12 «:«£»). WttBpJffCertirtO^roflSttWffia, 

~ a . ftfcjESftflHitr** c t ztm^mm 

[ 0 0 6 8 ] *fc. jftlfli^SBAB. ? "7'S T 1 5 
K <£ <3 , JlttflW«C ertu !*J©£T©WttfiWg a , ~ a . 
©5fe, H^g#Sftfciffl©MttfW8a 1 ~ai©£T 
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[0 0 6 9 ] 3 W&gS6BA», Z?-y7STl 
6t,c£<0> SJItta^il^cEBJftS©^, M 
/NR©lltta 1 l/3WBIwL.«c<i«>ilt». C©fc&. M 

? 6 mx hz>w&, mssn shft*^ fciws-w % m 
Vttz? 1 ? 4 xts-kfm-irzz bit-OS z. 

[0070] (m2(Dmmm) jwc. mmm2<o 
i (owmimb n-tm^-o^x »*©» u t>§w&«- 

B&U cc^BM&S^&c^-tifca^s. ftfe, 

HT©«mw«c o t> r & k i/ rsa u /cii * 

SWTS. #IIM5iiB. £l©£flft$ffi© 

ISf5i?iJ-C4> V , -fe^a Uf--f©|Bj±40afc©'C4>-5 

r. jtfttiK», mtraif cm)©sja3iaR:*i»T. 

tfm = hCM)K3EEL-WII«tfto , Cl>5. 
[0 0 7 l]t9T, 44QH$liB. HTKa^SIItt 
20 EB^R^©? + U >^fcHf 5«){^f BSF 1 O^JBI^ffi 

ffiEM^K*Jli>TB. «IIV©h^« 
3 3*^. ?tl/>ymtBft<, ftU>yMG,Zq* 
44«S0TirffipIfilK: (H^B*1-S)IH*BA4^K:> 
«ffl««BA«:aHfj-S. 

[0 07 2 ] *OT*«gA©MMB£J&a$ 1 5B, ? 
tl/>i>MO^ y *y * fSm = h (M)=£H« C ©^ v 

mmmmtc amm?-* (j,a,,r t ) bmomt 

30 ^gVCCiMfIf€> D 

[ 0 0 7 3 ] Sfc, ^M^SBV©)I14fEBJ^HgP3 4 
B. Wffl^ggA^JItStE f Cm)*«W*t» ?f 
l/>fM©« 7S/affiin=h (M)4fHU>fc»» C©/n 
»i/a«m*ffll>ririfil3I«{c|SttiEM f Cm)©IEStt 
4«4iFrs. ttT. »l©S65WI5«iiI«K«if¥-r5. 

[0 074] «fc 0 (cHIM^flKC J:h«. 0 1 

<mwmomm.m*.> ^+ u>yM©^^>*fflm 

= h (M)(cftl,THf£IFJ f Cm)«T«t9 C -fe 

40 [ 0 0 7 5 ] (03 ©^MJFJ) H4 B*»9a©*3 © 
^W^Jic^5JS'SiEHJ^XrA©t»^*^-r«SHt? 

IlS&'S2©»|©gPI 

») . mi Rvm 2 cmtmm 4»4 smib. ? * u 
>yMsww»t (eih#) ^aAKcto^sn^-c 
-rafet. *nwfi8B. nttEB^©-aib 

it#*s€) *mttz>b<Dxh% a 

[007 6 ] m®fcmmmmw.hmmmt&m 

50 i^M^fiSU, C©? 1 -)' l/>yM©Ar>afflm = h 
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*f-rS#S) fCm)*«UU M-3 (ftII5#SBVa>& 

ftl/>yM, MttBHfCm), lttf¥A©f&IEfflr-- 
df &ttii£i£S V KSHf^ffiaflUS £ a -s T 1, > 5 . 
[0 077]CCT, imMt LTtt. «tt^«©»^ 

b, i»8Bi»csjafti/j«©]iitt"c*o. rffiji io 
(R Stt) J . r^i> («, 2 6i) j, rn& 
(R £ttM) J ft*. HswajsttB. c 

&E«& 2 (OrniMWM iilD < , ^E^S V *> § 

[0 0 7 8 ] IfclEtSSBVCtt. «tt1f«S*fiS 
3 2 Rtf* + U>S?£fl»3 3 #««3*lfcflteS£& 
4. CtUt#<^ Htt!SnJ#^EgR3 1 B, flTiSUfca 

ttiIHJ^Hg[53 4' tcftoTt>S. 20 
[0 07 9 ] JRttfE^«aE«S3 4' B, «uaLfc«0C 

©/% »; ^afflm = h (M)«Wtt-SWB4. »6*ifc^ 
?J/»ttm*ffl^Tllt^8fc«14IEB f Cm)©E^14 

[0080] &±© «fc 9 annate «t o , pttraisic. 

JJtJ^., ?i>\s>V>M%£j&1>> •€•©;■» ? ^»film = h 
(M)£ftiTU ^5<^»<im4ffll,>fcJSttflEWf Cm)* 

[0 08 1 ] f«ffl#gBA©JSttffi?IJ£fi£ffl 
1 5 B, JBttBlWC ert, ©t&HfflT 1 - * ( v , C art* , 
n,P,,c 3 ,-,c„) > ^+U>^M, JSttaEB^f 

cm), mm-tmmm<DmE®7 : ~-z a ,a ( ,r,)§ 

C0 0 8 2]«4BE«SBVCB. Cti6*«W5i. H 
ttBUWftIiE8|S3 1#. ffrjlibfcai), JKttBEWC er 
^©^BEfflT 1 -* (v,Cert*,n ,P*,c, ,-,c„) tC 
ai^»-C«14Bo»Cer1i*«ttEO. WEfSSSJKttiE 40 
B^^fiEg|3 3 4 ' KSIffl-rS. 

[0 08 3 ] JffttE93ttffi$3 4 ' B, ttfE££#M1£ 
I§bJ«C ert^ ©iE^tt£*f £ * , *IIJ#fSBA*>SS 
Wc9H U>^M^ffl^r^©^'7^^tfm=hCM)* 

f Cin)©EStt*«WE"rS. OT. *l©*fl9B»4l5l 

[ 0 0 8 4 ] ±xE U fc J: 5 (C&dWttK * 1 
S(>'f2©»l©»tti, 3 fijffl* (IE 
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*»*) *ffft9ci#tr**. e©nn4»gtt, mx. 
Br>^- nis©isi^3»Mi t/r©^ + u>^Ma 

[0085] a*. *mmsi®9d&9it or, w^t 

SJRtttf. ^lRt>*»2©*W^iPID<, #*fB§« 
fV*6S*3httJ:H. t©g9F$#!©«H=h MfflE 
WBSOC. NB*fWA©RttEl&£iAiffl5». KffiE 

husk. & i ommmt m d < . sttisw«c er tu © 

USEE?*-* (v,Cert Al n,P,,c 1 ,-,c„) ftfs^IE 
^BVtCjMff 0. 1ME^SBV©JItttSW*MESI53 
IB. »SSl/fcaO. JSttlSW«Certu©^iEigm^)l 
ttaEB^HSP3 4" KSffl-rS. MttHB^ffigR3 4' 

b. mmnktfimmesm c ert^ ©iEStt£*-f £ t . 

l^"C» Wf»Wtt*> 6«C 5Mttl¥A £fOT*ggA {c 

aMt-rs. wMaAttt, uttSA^swai, is 

'>*fflm= h (M)£H-|f U ^ S/»«m*ffll»»Jltt 
EBJf Cm)*lt#T?> 0 4fc. ^1^TSJIttSA©^iiE 

31501 i feWJ^lij^oc^ffi LTEia©«lft*ff a 

[0 0 8 6 ] (»4 ©HJfe^) ^{C. $^B^©»4 © 

[0 0 8 7 ] ^mmmu. m 1 ~® 3 ©st*B&flB©ig 

IS1tasi«»ff tSMiSfll A C A {cSKnfS^SCi Hot 

[0 0 8 8 ] cntc#t\ Wffl#«BA. ISt4fW.W#^ 
fftiMg^A C ASCXl«iE^BV©ateS*J«T©J: 5 
KSEESn*. fW^^ACCte^TB, a&ja§l51 1 

[0 0 8 9 ] Mfflffl&m 1 2 B. fui!3L,fc«0CJn 
x.. J(S14Bl]»»tfaMSIBACAtc«0. luau/cff 

fg(p A , a.) a/asBtiii^-rsaffiiWf 

5. 

[0 0 9 0 ] UttEBJ^gB 1 5 B, f5iE0f«(CjJD 
Cert^ ,n ,P A , c, ,- ,c n ) %ttiE««BV«:S<rrS 
[0 09 U-5J, IttiSnJMfW^gACACCfe 

fefcrtSClSttiM^ C ert^ ft »ffT 5«SI* t»otl,> 

[0 09 2] Cert A =SicucA [h <* IIP* I In I Id | 
I- lie.) ] ttiESSBVKfenrtt. Utt 

^TBj»^ffiSP3 mra^^affitcttiA. tib©j;^ 

K. 4JSSSs4*«&fcrtS©«ttHffiI«Cer1i4«iEf 
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[0 09 3] Verw [h (g | |PJ |n 1 1 c, 1 1- 1 1 c 
„) , Cert,] =va1id?jy±©J:5&«il,-r£K % 

[0094] mbomsm) H5 S*I1««5 © 

SHI ~SI5 OHMSgJBiO^WC* *> . 
JM*WfcBtftiE*SfiV*s. «ttlEi38*aE8|J3 4K«t5 

^essocjs d r aa©*r«2/ * f a *f bjs^ if* 
m.mm«m3 5 mti>s. 

[ 0 0 9 5 ] C CT, MMimmSS 5 B. MttiiEW 
ttEE$ 3 5 (C «fc 0 «ME § ft fcJItt i Bfigtomffim t 

£38**1 r^ftj it,^=fc^c^£-g<©i#£-?\ JStt 

*s r 2 6 r 2 0 *eu:j 1 1» 9 i 5 k 

<t ft B"js*n©tt$sas& &wm«im 

[0 09 6] »*S/^^A©lH*fcROW»l*fflrc** 

*s. m«. r2 0<WJO:j r^#j rsntjowtt** 

ffiS©«tti. r|IttBR»CertiO«f <S#) Hj 
©JRttijWEMSh, fi^ rjnaPMICertiOWf 
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**.. «Mtfi»iaW3 5*«. tlliE$ft;fcJItt«c*^ 
[0100] PliH, tt&JRSD BSOT»W4D B 4 
fljf B. ttfr>X:r A gftiMnKSD B £ fcfUJPffSB 
aDB««»r*«:BM«: TO*I1DB©S^OTJ 

SXf/yutt rgpgj jy±©Mtt4^iTS^©J;5 
10 S6&«H*jES>r*>«fcl,». 

[oion *5i>tt. tm^^T-A^mmomn^y 

S9F) . ^Xt-A^^^tpJ^T'^S^. ttftXffltlT 
g|53 5#s v *SEShfcJR14{C3|-3l,>r, £fT'<5.*-* 

[0102] (S6(D»1) $#PJ©gr6 © 

tm*. wki&e (gfcp)) ±«Dffini»tteW«WH 

(EDLP) «C#g**fc*JS£ft-3TI,»a. 

[0 10 3] WPSS¥E (GF(p)) tt. *BM* 

GFCp)±O»P3tt«4«ltlc0T4B») 4 a, bGGF 
(p)£4 a 3 + 2 7 b ! *0&6S£-f 

{ (x, y) GGFCP) ! I y ! = x s + ax + b) } U 
0 

tmiztiz, <iu o : fl^w^pga^. 

[0104] Tftfc-fc. $08»i$l8B, IV 1 ~~H5©& 



[0 097] fftfoS. M^tfIW§|53 5 B, ffit,© 30 Hill^J6*ffiRft!iaBi#{caflltyft^}^-c*S. Aft 



[0 098]Ofc©£9WWMCJ:0. £1~»4©*E 
[0 0 9 9 ] ft*, 44HU»i«. *WWttf*PlW3 5 



b. # i ommtMtwm § ftfl^nr 2 ~» 5 ©& 

XMffilMc! Iffl § h5SS«T©i 5 6ft 
S. ftfc, GBtHRftSUbO^i-rs. 

[0 1 0 5 ] S«P,= S A • G (mod p) 

( = G+- + G : G*SMHm) 
35"; hffiC, = b, • G (mod p) 
35 9 hflV=u • G (mod p) 

[K3] 



SSl^SEstf (m)-G = VP A +mV+ j]m 



1 C j (m 



. d p) 



^2^E^C, = h(a 1 ||rO • G (mod p) 

#4. ±IB^JB»K:K«l/fc*ffiB. 

^Xi'fti") , ytfiW (CD-ROM, DVDft 
£) , (MO) , 4QWt^*y«ciT©E 



[0106] COBtWIftiLTI*. 7'D^A 

frc*ti«. ^©iBtt^BfsjftoffJil-cfe^-rfem 

[0 10 7] tit, ?ia>Ka-$K-f>^ 
h -JI/$ftfc7"P 4*7 A©fg7SfC«-5^ 3 > b'* - £± 
-Cfitiill/TC^OS (^^fO^XfA) ^, 

50 f-ji^-xfly? h. Yv-itvv M£©MW 
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[ 0 1 0 8 ] 3 6K. 4^K4W&eiUtttt». 

f B'M £ fc B-lSKtt b MEWMit £>^r S ft & „ 
[ 0 1 0 9 } & fc. IBttS&ftB 1 -3{CPB6r. «»©« 

h-mmmc *? w a M^ntf 3 ft a 
wcctiw siB'ttiif*{c$s n % »MBHft©i»c' 

S»-3tiSt,>. io 
[0 1 1 0 ] W. «MW*a>t»->B, Bit 

ws&teffl£llfrTS *>©•*?<&•?-?:, ^ya^cn 

*>6ttS«B. «R<DttK^9 h7-£g*!3ft;tf 
X f - A3£©j5Jft ©$$•?£> r> X h Ml >. 

[oiil] *fc, #«WK:*tf*=i>i:a->iB. 
^ y a > KR 6 1*. If «89I»£K:S 4 ft h mmsm 

[oii2] ^hbswb. ±EftiaiBm(ciine 20 

§ ft S *> ©r fc < . HJSKHSr B*osi Lfci> 
fWKJOBtt. lfflr$fifiL-C«l»*«>^ffit»« 

(R vis. «fw»/hs*ft£. sttofcflfffi) wse, 

fcbfe. rjitittfRj ©h». ff£©as$Mt*-c*ft« 
. tt£il&±© ristt (*o«o^-s«?a • 14 

ns„ 30 
[0113] «x.b, ^mnzmnorngmmgiPiy' 

JSttfffR£LfcJ§£. tt&9&± r&^Sl^ft5« 
©-SI3J ^««oT«), $#PJ© TJlttj (CS 
$3ftS„ 

[0 1 1 4] fiU C©»£, ^#SB£«iE^a 

©««&&## fc-? 2 #©-fw • ftsE-&«H#«ffl3ft. 
m^cMKWfcjstttf woRTjk&m jiu mmmtm 
±xommm.m^b^ f j tK^mmct^. u-fcto 40 

mmmm-mmtmmt, mm 
momoxh^K tit t «w«aiAi*ttanBiv 

fc*§£fcHjf&r*£,, 

[0 115]-*, ffttHNR(Z>SKicff<r>, runam 
*j ©»». &Srs#t»S (&JIttflW0 ©*££*** 5 

WJ bfcfc©rfc<Tfc##PJ©«B't'S^3fta„ M 

wowxu, tt^ii^±© Tmmvzmxsi 
mm® r«ttBB»j {ctt^sns. 50 
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[ 0 1 1 e ] *fc. rfijffl^ggj so* mm^mmi 

©KB. JdfilrfctMBW**fc©"C**i«. tt^iftS: 
±© rfij^^j r^n^j Kttwes*ift(,». «*.«, 
rs££ (jutttiWE) ais^t- F< DJ (c 
aflrr5i§£. Xb--K< D (ffttlSW») ©JK3W 

m.i SffiStiJcfcaa*. c©«fcS&JJtefc#f6W© 

• [0 1 1 7] *fc. S^ttl^fiSSC^EJ^WBliJfiBfclEO 

■snitsmim t>h&. afc. &5tflB$Bso s sjBwi© 

^■tfCCR&r. &£S (sfflffl-SSgBA, lftfl>5»f& 
fiWKIACA, «§SgV) 31ffl3nS'>X 

[0118] WAtf, Sl^6CD»lOS^ M 
ffiS B»»ff «HSB A C A i ^E^^S V i 

^T'B, ipJffl^B A i M1£B>3«$fT«H&aA C 

Ai«a**T*>j:i,>. 3 6K, m&bicsmm&$. 
vtm&nxb^. 

[0 119] 3 ±IB#^WJ,l^CB®^©gPi© 

BUft^ffiK^ 3 hS^jaESfr^iSa^CflHiS 
WWHHS 3 ft 5 C i T» ffl 3 ftfcii^K: tt. * 
©WW 3 ftfc^W^^ife-r SJi^-CCB^gp^JS^tf 

[0120] ^©ffe> ^»OSI§Ml/%d 

[0121] 

as/^y-AKiS»c», itfsjba^©^M'c«-^-cts 
[Drar©HW&M9i] 

[HI] **9H©» 1 ©HiBPSICcffiSJPJttiEW^f- 

[H3 ] BlgQBgJSCCfetf *MttfEW©«i^*lliWrs 
[H4 ] $^©03©^W5ffiCC^5MttiEHJ'>X? 

[H5] *»w©j»5©sat^»«:«aftE«6ai©fli 
[^©ISHJ] 
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1 1 '-msim 

i s-M&mwtsm 

14-lttfffSW|5 

1 5 -mwtiffli&m 

a c A-mmmsmmmt 

2 1 -mmffl&m 



MZOO 2-2 1 502 7 
20 



* 2 2-M£B5J»3StTffl$ 
V-Wttti 
3 1 -MttBiOttWES 
3 2-MttfMRK** 

3 4, 3 4' "MttHPJMEg 
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